> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/end-user-guide/logging-in.md).

# Logging in

This page covers signing in to SECUREpass and getting into your applications from there.

## Your first login

Open the SECUREpass address your IT team gave you.

Sign in with your username — usually your work email — and the temporary password you were issued. You will be asked to set a password of your own straight away. Choose it now rather than reusing the temporary one; it has to meet your organisation's password rules, and SECUREpass will tell you if it does not.

## Signing in with MFA

After your password you may be asked for a second proof of identity. Depending on how your organisation has set things up, that could be:

* a one-time code you type in
* a push notification you approve in the SECUREpass Authenticator app
* a security key you tap
* a fingerprint or face scan

Follow the prompt on screen. If you have more than one method registered, you can usually choose between them.

## Opening your applications

Once you are signed in, your applications appear in your portal. Select one and it opens — SECUREpass signs you in for you, so there is no second password to remember. That is single sign-on, and it is the main reason your applications live here rather than as separate bookmarks.

## If you cannot sign in

<details>

<summary>Forgotten your password</summary>

Use the *Forgot password* link on the sign-in page and reset it yourself. You do not need to raise a ticket.

</details>

<details>

<summary>Account locked</summary>

Too many failed attempts locks the account for a set period. Either wait for it to clear or contact your IT help desk.

</details>

<details>

<summary>Lost your phone or security key</summary>

Sign in with one of your other registered methods if you have one. If you do not, your help desk can get you back in and help you register a new device. See *Managing your MFA* for what to do next.

</details>

<details>

<summary>Password rejected as too weak</summary>

The rules are set by your organisation, not by you. The message on screen says which rule failed.

</details>